Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.

learn more… | top users | synonyms

3
votes
1answer
49 views

Is it unsafe to restore backed up data from Google servers?

I have an Android smartphone that I don't trust. It has an old version of Android and has been vulnerable to Stagefright and a host of a hundred other vulnerabilities for months. Although there is no ...
1
vote
1answer
44 views

When using Dropbox to sync Keepass db, is it ok to open it in synced folder?

I'm going to be storing a Keepass 2 database file (.kdbx) in a local folder that's synced by Dropbox. Is it safe to use Keepass to open the database directly considering everything in the folder is ...
1
vote
2answers
100 views

Why are application/services still using outdated Blowfish encryption? Is it secure?

For example, CrashPlan, an online backup service, is using 448-bit Blowfish to encrypt its backup files (only enterprise product line has the ability to choose using AES-256). According to Blowfish's ...
11
votes
8answers
260 views

How to choose a password that I have to remember for a long time but do not use a lot

I have a scenario where I have to remember a password / keyphrase, which I will not be able to recover if I forget it, for a long time (probably more than 10 years). The problem is because this ...
2
votes
1answer
52 views

OpenPGP encrypting backup files and sending them to Usenet servers

My Internet service provider includes Usenet servers with about about 45 days of retention. I'm planning to backup my most important files on there. I have a 50Mb/s symmetrical fiber connection to ...
0
votes
1answer
34 views

Resuming an interrupted nmap scan:

I need to: --resume <filename>: Resume an aborted interrupted scan. But I didn’t: -oN/-oX/-oS/-oG <file>: Output scan in normal, XML, s|<rIpt kIddi3, ...
0
votes
1answer
109 views

Online vs offline backups [closed]

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the ...
2
votes
0answers
16 views

fulfillment of : ETSI EN 319 411-2 or ETSI TS 101 456 - "7.2.2 Certification authority key backup using secure world daily backup on tape

Can someone explain me how one CA can fulfill normative request: ETSI EN 319 411-2 or ETSI TS 101 456 "7.2.2 Certification authority key storage, backup and recovery ... c) the CA private ...
4
votes
2answers
88 views

Can a website have multiple valid TLS certs looping back to multiple root CAs in case one of them is compromised?

Sometimes, CAs get compromised, like Diginotar or Comodo. In such an incident, anything can happen from individual certs being revoked to the entire tree being scrubbed from the cert store. A company ...
0
votes
0answers
205 views

Windows Credentials - read password

What is the cipher used by windows Credential Manager to generate credentials backup files (*.crd)? With a backup file from Credential Manager and the password used to created that backup file is it ...
0
votes
0answers
35 views

SEP File Exclusions - symantec [closed]

SEP Exclusions My organization is considering a commitment with centralized file / data protection and I am keen on reviewing the Symantec ENDPOINT protection. I have installed a trial and have found ...
1
vote
3answers
188 views

Is this approach to backups secure?

I've got an existing (personal) backup service which I'm rewriting from the ground up to be secure. At present, I just store files (and diffs) in AWS S3 with no encryption. It works fine but I'd like ...
6
votes
2answers
120 views

How much can I trust the “factory restore/reset” on a(n) (potentially compromised) android?

This question is a simple one: how much can you trust the "factory restore/reset" option on an android device? If the device has possibly been compromised, is it possible the "factory reset" will ...
3
votes
2answers
146 views

Backup procedure for PCI

Our company is does not store any credit card details but we do transmit them. We are storing it in a cloud platform which is already PCI compliant. We just require to access the Cloud portal from ...
0
votes
1answer
91 views

uploading photos to cloud from an infected device [closed]

My computer is infected with Malware and (shame on me) of course I didn't back up my photos or word docs. I also happen to know almost NOTHING about computers. Is it possible to upload photos to cloud ...
2
votes
2answers
225 views

Reasons to encrypt filenames on cloud backup

I use a cloud service for my off-site backup, and all my files are encrypted. But I am wondering whether to enable filename encryption or not. Are there any security advantages to be gained by ...
1
vote
1answer
334 views

What evidence is there that SpiderOak is significantly different from Lavabit?

In 2013 Lavabit shut down because a US agency was demanding access to its private SSL keys and basically the deets on whatever users the US was interested in. Lavabit shut down rather than give the US ...
1
vote
1answer
143 views

Secure backup on online Cloudstorage

i own a small private server (@home) with all necessary features for my backup purposes (Owncloud, SVN, GIT). My target now is to ensure the safety of my data in emergency cases like fire/flood. For ...
1
vote
1answer
86 views

Why should I separately backup my revoke certificate

So I understand the principles behind the concept of a revocation certificate and why it should be useful to create one and back up before harm occurs. The thing is, I don't see a wide range of media ...
0
votes
2answers
55 views

Ubuntu backup to only specific devices

I am looking into setting up a secure Ubuntu server with daily backups to two different external hard drives that will be swapped with the external hard drive that is stored in a safe deposit box. ...
2
votes
1answer
74 views

How do you back up cardholder data remotely without a network connection?

In the PCI DSS version 3 it says: 1.3.3 Do not allow any direct connections inbound or outbound for traffic between the Internet and the cardholder data environment. But in the event of hard ...
0
votes
1answer
3k views

How to backup files stored in a possibly infected computer?

I am to reinstall an old Windows XP installation. Before I format the drive, I have to backup some data (~200GB) like .doc files, pdfs, photos to an external hard drive. My concern is that this ...
-1
votes
1answer
432 views

TrueCrypt Hidden OS Decryption

A couple of months ago, on my pc with Windows 7, i installed truecrypt and created a decoy system and a hidden os. I stored some really important documents and files on my hidden os that now i need ...
2
votes
1answer
56 views

How to keep important data secure in case of total compromise?

The question is simple, and really interesting at the same time. How would you keep your data secure in case of a total compromise of your infrastructure? This should NEVER happen, but as we all ...
3
votes
3answers
688 views

I want to roll my personal cloud hosted Password Manager using pass. How secure/insecure would this be?

I've come to the conclusion that I need to up my security. I currently have a dozen memorized passwords I use for every device and website. I'm against Keypass/Lastpass due to having to trust they ...
0
votes
3answers
121 views

Are backups really secure?

In many places a common practice is to connect in a backup drive at the end of the day and let the computer do an automatic backup in case of an emergency. I have been doing that for the past 2 years ...
2
votes
1answer
114 views

After restoring from a (valid) full disk backup can malware still persit?

In the comments to this question it is mentioned that even after a backup recovery malware still can persist. Do I understand that correctly? How is this possible? If Acronis True Image is used to ...
3
votes
3answers
208 views

Are cloud-based collaboration tools “safe”?

I've tried to bring in collaboration tools at my company such as Evernote, Dropbox, OneNote, GoogleDocs etc. at our company but am finding it tough to get people on board. We use Sharepoint to store ...
2
votes
1answer
490 views

How do I properly bury a hard disk drive to keep it healthy?

As a way of backing up big amounts of data (about 1-2 TB) I thought it's good idea to bury a hard disk drive (in a damage-preventing shell) to be able to dig it later and read all the data from it if ...
94
votes
12answers
22k views

Where do you store your personal private GPG key?

So, I want to start using pass, but I need a GPG key for this. This application will store all of my passwords, which means it's very important that I don't lose my private key, once generated. Hard ...
0
votes
1answer
574 views

What is an offsite facility as per PCI DSS requirement 9.5.1?

PCI DSS Version 3.0, Requirement 9.5.1 says that we have to store media backups in a secure location, preferably an off-site facility such as an alternative or backup site or a commercial storage ...
0
votes
2answers
74 views

Is there a point in restoring from backups if you don't know where the virus came from?

It's been happening more and more frequently I get viruses with no idea where they come from. I have recent backups, but I don't know if there's a point in restoring since I would just install the ...
5
votes
2answers
3k views

What trust level should I give keys I need for encryption?

As I'm encrypting server backups, I typically install my public GPG key from a keyserver into me server's keyring: gpg --search-keys 6569758F I import the key into my keyring. I then attempt to ...
3
votes
3answers
503 views

Backup personal email on VPS - privacy, security and trust risks

FastMail.fm hosts my personal email account. Now they claim to have reliable backup services, but I'd like to have my own copy of my email archives. What I'd like to do is back up to my VPS, which ...
11
votes
4answers
6k views

Why not simply backup the TrueCrypt container file?

The TrueCrypt website has some detailed information on how to backup (TrueCrypt non-system volumes) securely, summarised below: Create a new TrueCrypt volume Mount the main volume. Copy all ...
1
vote
4answers
593 views

Protecting Backups from Viruses

Currently we are using ReadyNAS by NETGEAR to hold all our images from all our machines. My question is can viruses expand from the machines and infect the NAS drive and the backups? We are using ...
1
vote
1answer
167 views

Apple AirPort w/ open network + Time Capsule backups

We have an Apple AirPort running in our office. We are planning on opening a free Wi-Fi network for public use during a small event, but I started wondering about the safety of our Time Capsule ...
3
votes
1answer
2k views

Backing up SSL certificate private key files

What are some recommended practices for backing up SSL certificate private key files? I'm working in an environment where the public web servers are not backed up, because in theory the public ...
1
vote
2answers
359 views

best place to store backup encryption key [closed]

I have a server on which I keep an encrypted backup of some data. The server updates the backup once a day if the data has been changed and is physically accessible to many people. Further, I would ...
3
votes
2answers
2k views

Deduplication of Encrypted Files

Let's assume I have an 18GB database that is backed up nightly by dumping the database and then encrypted using a modern algorithm such as AES-256. This database has a daily update of rate of ...
2
votes
3answers
691 views

Encrypting Backups on Linux

I'm working on an automated backup solution to protect my files on my Linux servers. However, I'm not sure about how to securely encrypt the resulting archives. I am using 64bit linux, and I am ...
1
vote
4answers
648 views

Is a full backup the quickest or the longest on restoring [closed]

Studying for Security+ with Darril Gibson's book he says that "A full backup is the easiest and quickest to restore" Now I've been looking for another test exams and I found the MasterExam of the ...
7
votes
2answers
400 views

Backup schedule for Encryption Keys

How often should encryption keys be backed up? Should this be done on the same schedule as the encrypted content/configuration? That seems excessive, as the keys do not change as often. Perhaps ...
-8
votes
1answer
198 views

Hacker problems - They stole my backups [closed]

I am facing an issue where hackers are seeking to compromise two of my servers. They succeeded in wiping out both and stealing my backups. I had off-site backups and I am back online. Nonetheless, I ...
2
votes
1answer
146 views

Backup media storage strategy

As a company we are performing daily backups onto RDX removable media which is fully encrypted (shows as unformatted drive) and the backup software also encrypts the files during the backup process, ...
1
vote
1answer
109 views

What should be backedup periodically? [closed]

I know of less than 10 data files I modify regularly that I want backed up. I did a full system backup and tried doing incremental backups every week but find it unnecessary and too long. For example ...
4
votes
1answer
786 views

Standards for secure key backup of master keys with secret sharing

In many cases, there is a single master key that is installed in a HSM or similar device, but which should be backed up. The recommended method for this backup in many cases is to encrypt the master ...
1
vote
3answers
450 views

Is physical tape backup better than disk to ensure integrity

When assessing tape backups vs online disc backups, which of them ensure better protection from integrity incidents. For example, if the system is compromised by attacker or virus or malware and I ...
0
votes
1answer
120 views

Auto encrypt chunks of content for backup, best practice?

I'm just curious and it's more like a mind game, I'm not into cryptography. How would one encrypt data that's constantly generated? Put the data automaticly into chunks encrypt the chunk and send it ...
0
votes
3answers
607 views

Backup TrueCrypt hidden volume [closed]

I have a usb stick witch is encrypted using truecrypt. How can I back it up? The only method that comes into my mind is making a image of the usb drive and then restore it. But 16 GB I think it will ...